I have an active connection with my private VPN behind GlobalProtect. I know the connection is active because I can access resources that is only accessible through the VPN.
However, when I run scutil --nc list, I get:
Available network connection services in the current set (*=enabled):
* (Disconnected)   XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX VPN (com.paloaltonetworks.GlobalProtect.client) "GlobalProtect"                [VPN:com.paloaltonetworks.GlobalProtect.client]
Is there another command that would indicate that GlobalProtect is active?